Cyera's $1 billion Oasis acquisition bets that securing AI agent identities is the next cybersecurity frontier

Cyera's $1 Billion Oasis Acquisition Bets That Securing AI Agent Identities Is the Next Cybersecurity Frontier

Cyera agreed to pay approximately $1 billion for Oasis Security, a company founded in 2022 that has raised $195 million. The acquirer is a five-year-old data security company that surpassed $150 million in annual recurring revenue but remains, by TechCrunch's reporting, "far from profitable" 1.

That is the tension. Cyera is spending like a consolidator at a $12 billion valuation while losing money, racing to own a security layer for AI agents that barely existed as a market two years ago.

Data security company Cyera signed a letter of intent to acquire Oasis Security for approximately $1 billion, paid mostly in cash with the remainder in Cyera shares 1. Cyera confirmed the $1 billion figure when reached by CRN 2.

What Oasis actually does

Oasis Security, described by CRN as "a specialist in non-human identity security," builds technology that discovers, monitors, and governs permissions for autonomous AI agents and other machine identities inside enterprise environments 2. Post-acquisition, Cyera plans to integrate Oasis into a unified identity and data security platform 1.

For decades, enterprise security revolved around human users. Employees logged in, IT granted permissions, and access management meant governing what people could touch. AI agents break that model. They carry their own credentials, move across corporate systems at machine speed, and make access decisions in milliseconds without a human in the loop.

Cyera CEO Yotam Segev wrote that non-human identities inside Fortune 500 companies grew nearly 500% in the last six months, making them the fastest-growing identity type in the enterprise 3. The Cyera blog frames the strategic logic plainly: knowing what sensitive data exists is not enough if you cannot govern what touches it, and knowing your identities is not enough if you do not know what they can see 3.

James Hauswirth, global managing director for privileged access management at Kansas City-based Cyderes, told CRN in June that Oasis was "very clearly the front-runner in NHI" since coming out of stealth 2. His assessment comes from outside either company in the deal, offered in an interview about the identity security market.

The numbers behind the bet

Cyera raised $600 million at a $12 billion valuation in June 2026 and has raised approximately $2.3 billion in total funding since its founding in 2021 1. Oasis raised about $195 million from Accel, Craft Ventures, Cyberstarts, and other investors, including a $120 million Series B in March 2026 2. The two companies share investors Accel and Cyberstarts 1.

This is not Cyera's first acquisition. The company recently purchased Ryft, backed by Index Ventures, and Genie Security, which was less than one year old 1.

At $150 million in ARR against a $12 billion valuation, Cyera trades at roughly 80 times revenue. Committing $1 billion in cash and shares to an acquisition at that multiple means betting that non-human identity security becomes a must-have enterprise category before the financial weight of that valuation becomes unsustainable.

Category leader or land grab?

The bull case is straightforward. If non-human identities become as fundamental to enterprise security as human identity management already is, owning the combined identity and data layer could justify the spend. Cyera is assembling the pieces before competitors recognize the opportunity, and Oasis brings market position in a space with no established incumbent.

The bear case is equally direct. A company losing money on $150 million in revenue is spending at a pace that assumes the category matures on schedule. Rapid acquisitions can mask product gaps and integration challenges. And the shared investor overlap between Cyera and Oasis means some of the same venture firms profit on both sides of this transaction.

What is not in question is the signal. A $1 billion price tag on securing AI agent identities tells the market that the next cybersecurity perimeter is not a firewall or an endpoint. It is the thousands of autonomous agents already moving through enterprise systems, carrying credentials that existing security models were never built to govern.